Frequent connections to download.dnscrypt.info even with large refresh_delay (e.g. 168)

[nyx191]

dnscrypt-proxy/testing,now 2.1.14+ds1-1+b1

Steps to reproduce:

1. Monitor new TLS connections using some tool (sorry can't share exact way since it is a pet program which outputs such stats only as a byproduct)
2. All is silent, open firefox, watch 20min youtube video
3. Look at TLS stats, dnscrypt-proxy have sent ClientHellos to download.dnscrypt.info three times (at random time points, I mean no retries).
4. Look at logs, since system boot (after timing measurements) - nothing new, also no warnings / errors.

Probably relevant config parts:

[sources]
  [sources.'public-resolvers']
  url = 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md'
  cache_file = '/var/cache/dnscrypt-proxy/public-resolvers.md'
  refresh_delay = 168

  [sources.'relays']
  urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/relays.md']
  cache_file = '/var/cache/dnscrypt-proxy/relays.md'
  refresh_delay = 168

I thought that dnscrypt-proxy does not require connections to its domain beside regular refresh, probably I could even edit config above to make it all use raw.githubusercontent.com, so no connections to download.dnscrypt.info whatsoever, but in reality I'm getting quite frequent home calls. Am I missing something?

[nyx191]

Sorry, this is just wrong:

at random time points, I mean no retries

Apparently those are retries of some kind.

I can do TLS handshake to download.dnscrypt.info, but connection is throttled right after, so likely dnscrypt-proxy wasn't able to download public-resolvers list (for long time?) and retried constantly. Still, lack of logging in that case is a bit sad.